List vendors for an audit
Retrieves vendor population data for an audit.
This endpoint provides access to vendor records visible to auditors during an audit engagement.
Supports filtering by:
- search: Searches vendor names (case-insensitive)
- vendorStatusesMatchesAny: Filters by vendor status (ACTIVE, ARCHIVED, IN_PROCUREMENT)
- inherentRiskMatchesAny: Filters by inherent risk level
Results are sorted by name (ascending) by default. Use orderBy and orderDirection to customize sorting. Sort parameters must remain consistent across paginated requests.
Uses cursor-based pagination. To paginate:
- Make initial request with desired pageSize
- Check results.pageInfo.hasNextPage
- Use results.pageInfo.endCursor as pageCursor for next request
Rate limit: 10 requests / minute.
Path parameters
The audit ID
Query parameters
Controls the maximum number of items returned in one response from the API.
Maximum number of results per page (1-100, default 10)
A marker or pointer, telling the API where to start fetching items for the subsequent page in a paginated dataset. Note that the requested page will not include the item that corresponds to this cursor but will start from the one immediately after this cursor.
Pagination cursor from previous response
Search term for filtering by vendor name
Filter vendors by status values
Filter vendors by inherent risk level values
Field to sort results by. Allowed: "name", "inherentRisk". Default: "name"
"asc" for ascending, "desc" for descending.
Sort direction: "asc" or "desc". Default: "asc"
Response
Paginated list of vendors with pagination metadata
Example response
{
"results": {
"data": [
{
"id": "5f2c939a52855e725c8d5824",
"name": "Acme Corp",
"findings": 3,
"lastReviewedCompleted": "2025-01-15T10:00:00.000Z",
"nextSecurityReviewDueDate": "2025-07-15T10:00:00.000Z",
"vendorCategory": "cloudProvider"
}
]
}
}